Official Looking ‘Smishing’ Scam Back on Iowa’s Radar: What to Know

Show of hands, who has gotten an annoying text from the Iowa DOT in the last month or two asking for payment on an alleged unpaid traffic violation? I'm right there with you. Lately, I have been receiving texts about unpaid tolls in Chicago. It's been over three years since I was last even remotely close to the area. These are just two of the many "smishing" attacks that Tri-State residents are inundated with, as scam artists look to the latest in tech to steal your information and funds.

These messages look official, claiming to be from the Iowa Department of Transportation or DMV. They often accuse you of owing tolls, registration fees, or unspecified traffic violations. They usually come with a link urging you to pay up or resolve the issue. The catch? The Iowa DOT doesn’t send out fee collection texts. EVER. They don’t collect tolls, and they’ll never ask for your credit card or personal info via text. The scam is essentially designed to panic you into clicking a link that either steals your information or infects your phone with malware. Both are very bad things.

This type of scam is called smishing, short for SMS phishing. It works just like email phishing, but instead of showing up in your inbox, it hits your phone via text. These messages usually look like they’re from a trusted source. It could be your bank, the postal service, or a trusted government agency. Texts will also use urgent language to pressure you into acting fast. “Your account is locked!” “Your package couldn’t be delivered!” “Click to claim your prize!” If it sounds Ph-ishy, it probably is.

Get our free mobile app

So, what should Iowans do if they get a "Smishing" text?

• Don’t click on any links. Just receiving the text isn’t dangerous. However, clicking the link could open the door to malware or a fake site designed to steal your login info.
• Don’t respond. Even replying “STOP” can confirm your number is active and lead to more spam.
• Report the text. You can forward it to 7726 (SPAM) or use your phone’s “Report Junk” feature.
• Delete it. Once reported, just get rid of it.

Now, if you did click on a link or provide info, act fast. Change any compromised passwords, contact your bank if financial info was shared or given, and run a security scan on your device. Make sure to report the scam to the FTC at ReportFraud.ftc.gov and place a fraud alert on your credit if sensitive data (like your Social Security number) was exposed. The Iowa Fraud Fighters are another great resource in our state.

Smishing isn’t going away anytime soon. In fact, it will probably become even more difficult to spot as technology advances. Staying alert, skeptical, and informed is always your best defense.